update sys_user set password = #{newPassword} where id = #{id} AND valid = 1